Sergio Andreozzi [mailto:sergio.andreozzi at cnaf.infn.it] said: > voms:/foo:EXPECT:/foo/bar:/foo/xyv That would also be possible, although it's less explicit - indeed you could have just voms:/foo/*:/foo/bar:/foo/xyv if exceptions are the only things that can follow a :, but it's less obvious if you read it. Stephen